Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
File: B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft (raw, json)
Hash identifier: UG299cWF8Lkh8jzQwTViwIA7iwgLVBM8r0b2OAHAjX4=
Subject key identifier: 40:96:B4:CF:25:BA:02:F2:CD:FA:EB:7E:3E:05:06:C1:9C:85:B8:86
Authority key identifier: B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25
Certificate issuer: /CN=b3b9360c0dda3d688f4dbe53e2b6d3cef47fe825
Certificate serial: 14ECDB8CEA5A020164A8F01D71B79AE7788AB9F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
Manifest number: 02CA
Signing time: Mon 20 Oct 2025 00:07:10 +0000
Manifest this update: Mon 20 Oct 2025 00:02:10 +0000
Manifest next update: Tue 21 Oct 2025 02:33:10 +0000
Files and hashes: 1: 323030313a3637633a3638383a3a2f34382d3438203d3e20323135393536.roa (hash: 9LWLJC/CS8sOfArHPeCb8VXjodevg9GVDezV1/woQjw=)
2: B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl (hash: wP3JCQDCm2xDqEQ+XYbyWWA1V4Ofghj0gEEz5lngwdU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl
rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:ec:db:8c:ea:5a:02:01:64:a8:f0:1d:71:b7:9a:e7:78:8a:b9:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b9360c0dda3d688f4dbe53e2b6d3cef47fe825
Validity
Not Before: Oct 20 00:02:10 2025 GMT
Not After : Oct 21 02:33:10 2025 GMT
Subject: CN=4096B4CF25BA02F2CDFAEB7E3E0506C19C85B886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b9:e5:da:9d:62:40:dc:60:ce:ce:0c:14:d8:
82:7b:ab:be:b3:10:68:ef:b8:09:f2:05:41:6f:ec:
d0:87:c2:3f:be:99:3d:66:b3:c9:b8:98:12:d2:57:
a9:ae:a3:10:79:f4:bd:0e:2c:eb:34:49:0d:6d:3b:
4f:e1:ea:df:23:5d:19:ba:56:95:59:f5:66:6f:6c:
ca:4e:cc:f4:6a:a8:ac:2a:1d:64:d0:77:b9:22:47:
ea:8a:93:a2:f4:e6:c7:46:15:7a:34:a3:d0:0d:61:
0c:c6:b3:52:aa:95:7e:64:8d:3e:33:27:1d:d9:bf:
9c:14:bd:10:4a:80:85:c4:19:24:03:67:fa:0e:4a:
79:b0:c3:6d:26:d7:02:5a:3d:f1:20:e6:7e:ad:ca:
b8:b9:02:38:16:ce:90:92:5d:91:f8:3f:3d:fc:07:
69:a1:dd:c0:c7:c9:95:41:f8:7f:87:94:34:88:06:
8d:6a:90:26:b2:66:0e:b7:e1:58:ed:91:5f:c5:3d:
73:37:5c:63:78:14:4d:55:a8:80:8e:24:1a:18:58:
f5:6e:35:31:ed:7e:88:a1:cc:cd:e3:09:59:04:e1:
99:02:53:36:0e:8c:d6:95:55:72:95:ee:f4:f0:81:
bb:c8:82:c9:9f:e9:d4:2a:af:a7:61:da:8e:75:01:
b8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:96:B4:CF:25:BA:02:F2:CD:FA:EB:7E:3E:05:06:C1:9C:85:B8:86
X509v3 Authority Key Identifier:
keyid:B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c8:c1:71:96:45:8f:7d:5a:5b:9c:13:2c:a6:40:aa:a7:57:
cb:61:80:45:86:1c:e7:8d:c8:7a:c9:0a:b3:65:30:6d:82:ea:
1e:dd:9e:9b:45:5b:da:cf:85:c3:c4:55:4e:46:0b:a8:e9:36:
92:d7:ca:33:00:94:40:c8:dc:b8:ef:40:60:15:a8:c6:4a:7c:
5d:c1:71:32:69:52:a9:db:fb:0f:14:0a:fc:ce:e7:51:e3:d9:
55:1e:c0:4e:f1:1a:61:b2:04:b4:1f:52:ad:8c:3c:97:31:f6:
66:20:04:4a:79:99:4a:7c:c6:56:30:06:e7:84:46:38:c2:1c:
fc:95:c8:f4:ed:1c:92:ad:d7:af:bd:fe:e2:1b:48:74:fa:ee:
6d:bc:ea:e1:43:18:6d:30:ba:cf:db:fe:3c:df:ec:8e:23:5a:
96:04:fb:cf:a1:47:04:84:a3:67:c9:ad:8d:8d:c6:55:bb:73:
f7:ef:cf:a1:34:07:da:d6:35:f3:3e:cb:25:29:21:fd:77:0e:
99:80:b4:df:ab:c2:42:d1:eb:b5:0e:e4:9f:53:ce:62:9d:87:
e5:0c:cc:32:d5:32:11:80:d5:8c:05:e9:28:bb:f0:fd:27:80:
d5:84:1c:73:60:a2:61:c3:de:f9:63:33:42:d2:f5:d6:57:89:
4c:e1:51:67
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUFOzbjOpaAgFkqPAdcbea53iKufQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjNiOTM2MGMwZGRhM2Q2ODhmNGRiZTUzZTJiNmQzY2Vm
NDdmZTgyNTAeFw0yNTEwMjAwMDAyMTBaFw0yNTEwMjEwMjMzMTBaMDMxMTAvBgNV
BAMTKDQwOTZCNENGMjVCQTAyRjJDREZBRUI3RTNFMDUwNkMxOUM4NUI4ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTueXanWJA3GDOzgwU2IJ7q76z
EGjvuAnyBUFv7NCHwj++mT1ms8m4mBLSV6muoxB59L0OLOs0SQ1tO0/h6t8jXRm6
VpVZ9WZvbMpOzPRqqKwqHWTQd7kiR+qKk6L05sdGFXo0o9ANYQzGs1KqlX5kjT4z
Jx3Zv5wUvRBKgIXEGSQDZ/oOSnmww20m1wJaPfEg5n6tyri5AjgWzpCSXZH4Pz38
B2mh3cDHyZVB+H+HlDSIBo1qkCayZg634VjtkV/FPXM3XGN4FE1VqICOJBoYWPVu
NTHtfoihzM3jCVkE4ZkCUzYOjNaVVXKV7vTwgbvIgsmf6dQqr6dh2o51Abj/AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUQJa0zyW6AvLN+ut+PgUGwZyFuIYwHwYDVR0j
BBgwFoAUs7k2DA3aPWiPTb5T4rbTzvR/6CUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj
OTEyLzAvQjNCOTM2MEMwRERBM0Q2ODhGNERCRTUzRTJCNkQzQ0VGNDdGRTgyNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3M3azJEQTNhUFdpUFRiNVQ0cmJUenZS
XzZDVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYmYwNGM3Yy1m
ODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMC9CM0I5MzYwQzBEREEzRDY4OEY0
REJFNTNFMkI2RDNDRUY0N0ZFODI1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVsjBcZZFj31aW5wTLKZA
qqdXy2GARYYc543IeskKs2UwbYLqHt2em0Vb2s+Fw8RVTkYLqOk2ktfKMwCUQMjc
uO9AYBWoxkp8XcFxMmlSqdv7DxQK/M7nUePZVR7ATvEaYbIEtB9SrYw8lzH2ZiAE
SnmZSnzGVjAG54RGOMIc/JXI9O0ckq3Xr73+4htIdPrubbzq4UMYbTC6z9v+PN/s
jiNalgT7z6FHBISjZ8mtjY3GVbtz9+/PoTQH2tY18z7LJSkh/XcOmYC036vCQtHr
tQ7kn1POYp2H5QzMMtUyEYDVjAXpKLvw/SeA1YQcc2CiYcPe+WMzQtL11leJTOFR
Zw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:44:57 2025 by rpki-client